Privacy Policy

Who we are

TubeReply AI is operated by The operator of TubeReply AI (“we”), the controller of your personal data. Questions or complaints about privacy: the contact address on this site.

YouTube API Services

TubeReply AI uses YouTube API Services. By using it you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect and why

• Your Google account: email address, name and profile picture, to sign you in.
• An access token for your YouTube account, stored encrypted, to read your channel's videos and comments and to post the replies you approve. We never edit or delete your videos.
• YouTube data: your channel's name and ID, your videos' titles, descriptions and statistics, and the public comments on your videos (including commenters' public names and profile pictures), so you can read, filter and answer them.
• Content you create in the app: AI drafts, the replies you approve or write, your voice profile and examples, rules, reply modes, and a log of actions (who approved and posted what), so the app works and you can audit it.
• Technical data: a session cookie to keep you signed in and your theme preference in your browser. We do not use advertising or tracking cookies.

Legal basis: performing our contract with you (providing the service you sign up for) and our legitimate interest in keeping it secure and reliable. Commenters' public comments are processed on the basis of your legitimate interest, as the channel owner, in managing your channel's comments.

Who processes it for us

• Google (YouTube Data API, sign-in)
• Anthropic (Claude), which classifies comments and writes drafts
• Voyage AI, which finds your past replies that are similar to a new comment
• Supabase (database), Vercel (hosting) and Inngest (background jobs)

They act on our instructions under data processing terms. Some are based in the United States; transfers rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. We do not sell your data, use it for advertising, or allow it to be used to train AI models.

How long we keep it

• YouTube data is refreshed from YouTube or deleted at least every 30 days.
• Text of comments deleted on YouTube is removed within 7 days of the deletion being detected.
• If you disconnect your channel or delete your account in the app, we revoke our access immediately and delete the related data at once (and in any case within 7 days).
• If you revoke access from your Google account instead, or access expires and is not renewed, your channel's data is deleted after 7 days (and in any case within 30 days).
• Content you created (drafts, replies, profile) is kept while your account exists and deleted with it.

Your choices and rights

• In Settings › Your data you can download all your data (JSON or CSV), disconnect your channel, or delete your account.
• You can revoke TubeReply AI's access to your Google account at any time on the Google security settings page.
• Under the GDPR you have the right to access, rectify, erase, restrict or port your data and to object to processing. Contact us at the contact address on this site; we answer within one month. You may also complain to a supervisory authority; in Romania that is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

Security

Access tokens are encrypted at rest (AES-256-GCM), data is sent over HTTPS, the database blocks public access, and every reply posted to YouTube requires your explicit approval.

Children

TubeReply AI is meant for channel owners aged 16 or older (or the age of digital consent in your country).

Changes

We will post any changes here and update the date above; significant changes will be announced in the app.